Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/6GIgKiQav-u38TlWxRw3ZvuPczc.roa
File: 6GIgKiQav-u38TlWxRw3ZvuPczc.roa (raw, json)
Hash identifier: mb2ijbHAzjPfX/OePbJ1X5RYG2hecCIhZ4/rmM2qQFk=
Subject key identifier: E8:62:20:2A:24:1A:BF:EB:B7:F1:39:56:C5:1C:37:66:FB:8F:73:37
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 0194266BB4ED2DE77CFDD0CEB0DD41B55164
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/6GIgKiQav-u38TlWxRw3ZvuPczc.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203993
IP address blocks: 185.54.92.0/22 maxlen: 24
185.54.92.0/23 maxlen: 23
2a00:8640::/29 maxlen: 48
2a00:8640::/32 maxlen: 32
2a00:8642::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 05 Jan 2025 19:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b4:ed:2d:e7:7c:fd:d0:ce:b0:dd:41:b5:51:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e862202a241abfebb7f13956c51c3766fb8f7337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:54:95:8e:3d:9b:b7:10:97:9c:2b:51:ef:
1c:f2:53:c1:65:0a:b4:03:b8:cf:09:e5:1b:da:69:
29:82:80:76:2d:ec:9a:1f:97:61:dd:84:d9:50:36:
60:1f:bc:71:de:96:16:fc:08:78:ce:4d:94:cf:fa:
bd:f9:b3:0e:5d:d2:42:f8:f5:3d:6e:a0:58:9c:1a:
8b:7c:36:23:ad:cd:f1:0e:68:6d:d3:52:33:de:96:
0f:3c:c1:22:ba:d0:86:6d:a7:f4:d2:a7:c7:82:62:
30:7c:bb:bf:38:bd:b2:13:9a:02:17:99:49:b2:85:
ea:e7:cc:4e:c9:2d:14:71:b2:5d:3e:ce:d5:be:d5:
68:bd:88:30:28:c0:0c:1b:fd:2f:2b:3b:65:bb:a8:
e8:e8:3b:9f:58:9a:90:8c:7a:5f:5b:24:e6:35:e6:
39:a8:f8:cf:65:78:a8:4b:fb:07:a2:e8:f2:56:12:
3e:e3:45:ea:52:71:78:31:21:0d:ba:01:f2:dd:ac:
9e:b0:a5:79:0b:6c:bf:76:a9:87:5e:c1:20:bf:f0:
db:90:62:c6:e9:56:08:cf:e3:26:db:cf:b9:f2:68:
66:48:5e:71:a5:6c:d6:5a:d4:ce:a1:ac:46:84:2d:
8b:29:d5:6d:ba:46:07:e3:88:f1:50:fe:35:c4:b2:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:62:20:2A:24:1A:BF:EB:B7:F1:39:56:C5:1C:37:66:FB:8F:73:37
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/6GIgKiQav-u38TlWxRw3ZvuPczc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.92.0/22
IPv6:
2a00:8640::/29
Signature Algorithm: sha256WithRSAEncryption
1a:79:aa:0c:8f:b4:9d:30:b6:9a:b7:75:af:3f:df:bc:fb:78:
34:a6:fb:64:35:3b:90:f5:9e:27:2f:88:80:5e:92:4a:43:f5:
d3:84:b0:f1:95:eb:f7:de:ff:cf:f7:df:9c:64:d1:7a:87:9e:
c3:9b:67:fc:90:22:70:3d:d5:1a:55:82:6e:5a:f8:ab:6d:48:
27:8e:06:ed:9c:df:1c:5f:dc:a1:ba:48:1d:68:0b:7f:b2:88:
6e:1a:e2:c7:9c:f0:91:75:a4:5f:17:43:73:bc:59:d8:d4:54:
08:f8:6c:37:9c:cf:67:c8:ae:e3:6e:04:1b:34:cc:f2:00:af:
8f:73:c6:b8:49:ec:5b:4f:2d:57:5f:21:ca:4a:d9:80:09:c2:
89:e7:5d:89:74:77:82:73:06:e0:2c:dd:0e:8f:64:96:63:59:
d5:af:35:7d:de:40:4c:5f:77:b7:92:99:b0:6a:7d:60:f5:27:
bd:d9:e5:7f:02:bc:4f:18:21:24:ac:1b:92:d6:50:a1:df:30:
d4:29:6f:12:a6:00:f6:4a:36:8f:5f:66:54:a5:c3:97:5c:07:
47:ab:f2:b3:26:75:52:df:61:8c:d0:de:fb:94:4b:b5:70:be:
92:5a:48:37:ae:0b:34:b2:c9:44:0d:ad:4b:73:4c:87:c8:b7:
93:28:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:19:04 2025 by rpki-client